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METERED INTERNET USAGE 



CROSS-REFERENCE TO RELATED APPLICATIONS 
[0001] N/A 



BACKGROUND OF THE INVENTION 
1 . The Field of the Invention 

[0002] The present invention relates to the usage of computer services. More 
specifically, the present invention relates to methods, systems and computer program products 
for tracking a client's usage of one or more services provided by one or more servers. 



: o 3 a 

* W < < 

1 O !— i 



2. Background and Related Art 

[0003] With the exception of certain educational institutions and governmental 
entities, most access to the Internet is indirect. That is, rather than being directly connected to 
the Internet, most access the Internet through some intermediary, known as an Internet Service 
Provider or ISP. An ISP may provide various levels of service depending on the particular 
needs of its customers. For example, individual customers may access the Internet through a 
dialup telephone line, a broadband cable, or perhaps a broadband wireless connection. Many 
individual customers typically share an ISP's connection resources, at least to some extent. In 
contrast, business users often prefer a dedicated ISP connection with a fairly constant 
bandwidth. 

[0004] An ISP may provide various "points of presence" for connecting to the 
Internet. Depending on the ISP, these points of presence may include local telephone numbers, 
toll or toll free telephone access numbers, cable systems, microwave stations, etc. Cable 
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systems and microwave systems are local by nature, but it is generally a significant advantage 
for an ISP to offer local telephone access to keep costs as low as possible, both for the ISP and 
its customers. 

[0005] Although the number of computers with Internet access has grown 
tremendously, competition among ISPs can be quite fierce. As a result, ISPs often employ 
various service plans with aggressive pricing strategies to attract consumers, including 
businesses and individuals alike. Most service plans fall into one of two broad categories: 
(i) unlimited access for a fixed fee, and (ii) a certain number of hours for a fixed fee, with 
additional hours being billed as used. In either case, an ISP server is traditionally responsible 
for tracking a client's usage, if necessary. 

[0006] However, traditional tracking suffers from at least two significant problems. 
First, tracking each client connected to an ISP may impose a considerable processing burden on 
a server. This burden may be especially pronounced where an ISP has offered only unlimited 
access for a fixed fee, but would like to begin providing a reduced service level that requires 
usage tracking. In such a case, tracking may require upgrading to more powerful servers in 
order to avoid an overall performance reduction. Given the rather competitive nature of the ISP 
market, much of the benefit gained in offering a variety of service levels may be substantially 
offset by the corresponding increased costs and/or diminished capacity. 

[0007] The second problem is at least somewhat related to the first. In some 
circumstances, it may be desirable to distinguish between various types of access. More 
particularly, an ISP may wish to charge for access to one type of service, whereas access to 
another type of service may be without charge. Tracking this level of detail at the ISP, as 
compared to simply tracking raw connection time, imposes yet further performance loads on 
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the ISP's computing resources. Here again, the tradeoffs, in terms of benefits versus associated 
costs, may be undesirable or even prohibitive. 

[0008] In contrast to an ISP's computer resources, a client's computing resources may 
be comparatively underutilized. Furthermore, the overhead associated with having an 
individual client track its own usage of services is likely to represent a much less significant 
performance problem for the client. Whereas server-based tracking concerns the usage of each 
and every connected client, client-based tracking concerns the usage of an individual client, or 
perhaps a cluster of clients. As such, client-based tracking allows a substantial portion of the 
processing load to be borne by the client. While some type of centralized server tracking 
component may be useful in receiving and correlating usage information from individual 
clients, the server computer resources for implementing client-based tracking are likely to be 
significantly less than would be required in a comparable, substantially server-based, tracking 
implementation. Therefore, methods, systems and computer program products for tracking a 
client's usage of server services are desired. 
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BRIEF SUMMARY OF THE INVENTION 

[0009] The present invention uses one or more client-generated metering packets to 
track a client's usage of one or more services provided by one or more servers. Metering 
packets may be generated by a client and sent to and received by a server over regular periodic 
intervals. Each metering packet includes a time element that indicates the client's usage of the 
provided services. The time element may include a charged time portion for access to services 
that incurs an access charge and a free time portion for access to services that does not incur an 
access charge. Metering packets also may include other elements, such as a packet type 
element, a sequence number element, a session identifier element, a packet authentication 
element, etc. Among other things, a packet type element may be used to indicate whether a 
packet is for an active session currently in progress or for a session that is ending. 

[0010] When a communication protocol that does not guarantee delivery is used, 
sending redundant metering packets increases the likelihood that the information contained 
within any particular metering packet is received, even if one or more packets are lost. 
However, if packet delivery is successful, sending more than one metering packet with the 
same information may be redundant. A sequence number element may help identify any 
redundant metering packets that are received. Then, redundant metering packets may be 
discarded rather than processed to conserve computing resources. For example, a usage 
database may be updated to reflect the tracking information contained within a metering packet. 
Prior to updating the usage database, a cache of previously received metering packets may be 
searched, and if a metering packet with the same sequence number is found in the cache, a 
newly received metering packet can be identified as redundant and ignored. Otherwise, the 
usage database is updated with the tracking information in the newly received metering packet 
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and the newly received metering packet is added to the cache. The sequence number element 
also may help determine if some metering packets have not been received. 

[0011] Where multiple sessions are tracked, a session identifier element may be used 
to link a particular metering packet with a particular session. An authentication element may 
be used to assure that any given metering packet is genuine. For example, a session key may 
be associated with a specific session. Some of the tracking information within a metering 
packet and the session key may be hashed to generate an authentication element that is included 
within the metering packet. When the metering packet is received, the same tracking 
information and session key are hashed at the receiving end. Comparing the authentication 
element generated at the receiving end with the authentication element included within the 
metering packet determines whether or not the metering packet is genuine. 

[0012] Upon receiving a login request from a client, a login service may check 
configuration data to determine if the client should track usage. The configuration data may 
include an indicator from a configuration database that indicates whether or not usage should 
be tracked for all clients who login and an indicator from a database of clients that indicates 
whether or not usage should be tracked for a particular client. Configuration data may be 
extended to indicate whether or not usage should be tracked for a particular session. If the 
configuration data dictates that usage should be tracked, the login service communicates to the 
client that the client should track its usage of the one or more services provided by one or more 
servers. For example, the login service may send one or more headers to the client to indicate 
that the client should track usage and communicate various usage tracking parameters. 

[0013] While tracking usage, a client may terminate access to the services provided by 
the servers in any of a variety of ways, including hanging up, timing out, powering off, 
changing users, and logging off. In many circumstances, the client is able to send 
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session-ending metering packets to indicate that a particular session is terminated. For 
example, when timing out, changing users or logging off, the client usually continues to operate 
and can send the appropriate session-ending packets without incident. However, in other 
circumstances, such as hanging up or powering off, the client may discontinue operation and be 
unable to send one or more session-end packets. Furthermore, metering packets may be sent 
over an unreliable transport protocol that does not guarantee delivery. Regardless of the 
motivation, the client may store metering information in non- volatile memory and then send the 
stored metering information in a subsequent session. This helps assure that usage tracking 
remains accurate even when there is some uncertainty as to whether or not a particular metering 
packet is received. 

[0014] Additional features and advantages of the invention will be set forth in the 
description which follows, and in part will be obvious from the description, or may be learned 
by the practice of the invention. The features and advantages of the invention may be realized 
and obtained by means of the instruments and combinations particularly pointed out in the 
appended claims. These and other features of the present invention will become more fully 
apparent from the following description and appended claims, or may be learned by the 
practice of the invention as set forth hereinafter. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



[0015] In order to describe the manner in which the above-recited and other 
advantages and features of the invention can be obtained, a more particular description of the 
invention briefly described above will be rendered by reference to specific embodiments 
thereof which are illustrated in the appended drawings. Understanding that these drawings 
depict only typical embodiments of the invention and are not therefore to be considered as 
limiting its scope, the invention will be described and explained with additional specificity and 
detail through the use of the accompanying drawings in which: 

[0016] Figure 1 illustrates an exemplary system that provides a suitable operating 
environment for the present invention; 

[0017] Figure 2 illustrates an exemplary system according to the present invention; 

[0018] Figure 3 is a block diagram showing the data structure of an exemplary 
metering packet according to the present invention; 

[0019] Figures 4A and 4B are flow diagrams, from the perspective of a server, 
describing various acts and steps for methods according to the present invention; and 



[0020] Figure 5 is a flow diagram, from the perspective of a client, describing various 




acts of methods according to the present invention. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
[0021] The present invention extends to methods, systems, and computer program 
products for tracking a client's usage of one or more services provided by one or more servers. 
By employing one or more client-generated metering packets to track the client's usage of the 
one or more services, the present invention avoids the otherwise substantial processing burden 
imposed by substantially server-based approaches. The client-generated metering packets also 
provide increased flexibility and enhanced accuracy, in terms of what usage incurs an access 
charge, how various types of session terminations are handled, and in determining when a 
session actually ends. The embodiments of the present invention may comprise a 
special-purpose or general-purpose computer including various computer hardware, as 
discussed in greater detail below. 

[0022] Embodiments within the scope of the present invention also include 
computer-readable media for carrying or having computer-executable instructions or data 
structures stored thereon. Computer-executable instructions comprise, for example, 
instructions and data which cause a general-purpose computer, special-purpose computer, or 
special-purpose processing device to perform a certain function or group of functions. Such 
computer-readable media can be any available media that can be accessed by a general-purpose 
or special-purpose computer. By way of example, and not limitation, such computer-readable 
media may comprise RAM, ROM, EEPROM, CD-ROM or other optical disc storage, magnetic 
disk storage or other magnetic storage devices, or any other medium which can be used to carry 
or store desired program code means in the form of computer-executable instructions or data 
structures and which can be accessed by a general-purpose or special-purpose computer. When 
information is transferred or provided over a network or another communications connection 
(either hardwired, wireless, or a combination of hardwired or wireless) to a computer, the 
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computer properly views the connection as a computer-readable medium. Thus, any such 
connection is properly termed a computer-readable medium. Combinations of the above 
should also be included within the scope of computer-readable media. 

[0023] Figure 1 and the following discussion are intended to provide a brief, general 
description of a suitable computing environment in which the invention may be implemented. 
Although not required, the invention will be described in the general context of 
computer-executable instructions, such as program modules, being executed by computers in 
network environments. Generally, program modules include routines, programs, objects, 
components, data structures, etc. that perform particular tasks or implement particular abstract 
data types. Computer-executable instructions, associated data structures, and program modules 
represent examples of the program code means for executing steps of the methods disclosed 
herein. The particular sequence of such executable instructions or associated data structures 
represents examples of corresponding acts for implementing the functions described in such 
steps. 

[0024] Those skilled in the art will appreciate that the invention may be practiced in 
network computing environments with many types of computer system configurations, 
including personal computers, hand-held devices, multi-processor systems, 
microprocessor-based or programmable consumer electronics, network PCs, minicomputers, 
mainframe computers, and the like. The invention also may be practiced in distributed 
computing environments where tasks are performed by local and remote processing devices 
that are linked (either by hardwired links, wireless links, or by a combination of hardwired or 
wireless links) through a communications network. In a distributed computing environment, 
program modules may be located in both local and remote memory storage devices. 
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[0025] With reference to Figure 1, an exemplary system for implementing the 
invention may include client 110, proxy 130, and servers 140. Each of client 110, proxy 130, 
and servers 140 may be implemented as a general- or special-purpose computing device. Such 
a computing device may include a processing unit, system memory, and a system bus that 
couples various system components to the processing unit. A processing unit in combination 
with program code means is one example of a processor means. System memory may include 
read only memory (ROM), random access memory (RAM), non-volatile RAM, and/or any 
other type of memory. 

[0026] The computing devices also may include a magnetic hard disk drive, a disk 
drive for reading from or writing to a removable media, such as magnetic disks, optical discs, 
or other magnetic/optical media. The drives are connected to the system bus by one or more 
drive interfaces. Drives and/or interfaces for other types of computer readable media for 
storing data also may be present, including magnetic cassettes, flash memory cards, digital 
versatile disks, Bernoulli cartridges, RAMs, ROMs, and the like. The drives, their associated 
computer-readable media, and certain types of memory may provide non-volatile storage of 
computer-executable instructions, data structures, program modules and other data for the 
computing devices. Program code means comprising one or more program modules may be 
stored at each of the computer devices, including an operating system, one or more application 
programs, one or more services, other program modules, and program data. 

[0027] Client 110, proxy 130, and servers 140 operate in a networked environment 
using network connections 120a and 120b to communicate with each other. The network 
connections 120a and 120b depicted in Figure 1 may comprise a local area network and/or a 
wide area network (WAN). Such networking environments are commonplace in office-wide or 
enterprise-wide computer networks, intranets and the Internet. In a LAN networking 
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environment, network connections 120a and 120 may include a network interface or adapter, a 
modem, a wireless link, or other means for establishing communications over a network, such 
as the Internet. Network connections 120a and 120b are examples of communication means. It 
will be appreciated that the network connections shown are exemplary and other means for 
communicating over a network may be used. 

[0028] In general, client 110 accesses one or more of the services 142a-142n provided 
by server 142, services 144a-144n provided by server 144, and services 146a-146n provided by 
server 146 through network connections 120a and 120b and proxy 130. It should be noted that 
the terms client, proxy, and server are not mutually exclusive and should be interpreted 
broadly. A client consumes resources, a server provides resources, and a proxy operates on 
behalf of either a client or a server. In many circumstances the designations of client, proxy, 
and server apply for a particular time and then change. For example, a client at one time may 
be a proxy or a server at another, and so on. It should also be noted that each of the servers 140 
may be a cluster of servers, and that each individual server may provide one or more services or 
a particular service may be implemented across one or more servers. The present invention 
does not require any particular configuration. 

[0029] Turning next to Figure 2, tracking client's 210 usage of one or more services 
provided by proxy service 230 will be described in greater detail. Communication between 
client 210 and proxy service 230, within proxy service 230 over network connections 236, and 
between proxy service 230 and either web 240 or census service 232d, follows a 
request/response protocol. The HyperText Transfer Protocol ("HTTP") is one type of 
well-known request/response protocol. Communication between client 210 and census service 
232d may use some other communication protocol, such as User Datagram Protocol ("UDP"), 
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However, the present invention is in no way limited to the use of any particular communication 
protocol or any particular network topology. 

[0030] Proxy service 230 includes a login service 232a. In one embodiment, login 
service 232a is a Unix daemon. Logging in to proxy service 230 is accomplished in two stages. 
During the first stage, a secure session is established between client 210 and proxy service 230 
so that sensitive information may be exchanged. After the first login stage, the login 
service 232a checks a configuration database (not shown) to determine if usage tracking is 
enabled for clients attempting to login. The login service 232a also checks a client 
database 234a to determine if usage tracking is enabled for a particular client, such as 
client 210. For certain types of access, usage tracking may not be enabled. 

[0031] If usage tracking is enabled, the login service 232a creates a unique session 
identifier for the new session with client 210. Those of skill in the art will recognize that the 
present invention may be particularly useful in environments where sessions are relatively 
short. For example, mobile devices, such as personal digital assistants and cellular telephones, 
which tend to have short sessions (due to airtime expenses and/or other factors), may be more 
likely to benefit from the present invention, than other devices, such as personal computers 
where sessions may be several hours or days. Nevertheless, the present invention is not 
necessarily limited to any particular session duration or environment. 

[0032] A session key is negotiated between the login service and the client to enable 
secure communication between client and login service. As described in greater detail below, 
the login service sends a hash of the session key to a census service for use in authenticating 
metering packets. Hashing the session key provides an extra measure of security because the 
session key is not communicated to other systems — only the client and the login service know 
the key's value. As used in this application, the term "session key" should be interpreted 
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broadly to encompass any value suitable for authentication. In one embodiment, the session 
key is hashed using a Message Digest 5 ("MD5") hash. The login service 232a also sends one 
or more headers to the client. The one or more headers include usage tracking parameters, such 
as an indication that the client should track usage, the unique session identifier, a metering 
interval indicating how frequently the client should send metering packets, etc. The 
configuration database may be used to configure the metering interval. In one embodiment, the 
metering interval is expressed as a number of seconds. 

[0033] There are two types of metering packets: a session-in-progress metering packet 
and a session-ending metering packet. The session-in-progress indicates that a session 
continues to be active, whereas a session-ending packet indicates that a session has terminated. 
It should be noted that the present invention is not necessarily limited to any particular type of 
metering packets. When the time interval expires or when a session ends, client 210 sends one 
or more metering packets over network connection 220a. Redundant metering packets may be 
sent to increase the probability that they are received if an unreliable communication protocol is 
used. In one embodiment, three metering packets are sent using UDP. Each metering packet 
includes a sequence number so that redundant metering packets may be discarded. 

[0034] Login service 232a sends the unique session identifier and the MD5 hash of the 
session key to census service 232d over network connections 236. Census service 232d 
receives the metering packets from client 210 and uses the session identifier to track the client's 
usage of the services provided by proxy service 230, such as email service 232b, web service 
232c, and other services 232n. As metering packets are received, the census service checks a 
cache of received metering packets so that redundant packets are not reflected in usage 
database 234d. Usage database 234d is one example of usage means for tracking at least one 



- Page 14 - 



Docket No. 14531.127 



r£ W ^" 

> < R a: » 



client's usage of one or more services. The size of the cache is configurable. In one 
embodiment, the census service is implemented as a Unix daemon. 

[0035] The census service 232d is relatively simple. It does not maintain any state 
information for any client connections. Furthermore, policy decisions regarding valid sessions 
and billing are made in post-processing the usage database 234d. However, if a 
session-in-progress metering packet is received for an unknown session, an error is generated. 
Redundant metering packets are discarded to avoid unnecessary updates to usage 
database 234d. The census service 232d employs a master-children architecture. A master 
process accepts all requests from the login service and processes them upon receipt. The 
master process also accepts the metering packets from client 210 and dispatches them to the 
children for processing. The number of children is configurable and therefore enhances 
scalability. 

[0036] Note that proxy service 230 also provides access to the web 240 (e.g., the 
World Wide Web) over network connection 220b. This access may be through web 
service 232c or may be directly between client 210 and web 240. For example, in one 
embodiment, secure connections between client 210 and web 240 bypass proxy service 230. 
Note that in these circumstances, it would not be practical for server-based usage tracking to 
monitor client's 210 secure access to web 240. 

[0037] Hanging up, timing out, powering off, changing users, and logging off trigger 
client 210 to send one or more end-of-session metering packets. Because the session 
terminates, client 210 also stores the end-of-session metering packet in non- volatile 
storage 212. When power is restored, client 210 reconnects, or another user logs in, client 210 
restores the prior session data (including the end-of-session metering packet) from non- volatile 
storage 212 and sends the prior session data to the login service 232a. Upon receiving the prior 
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session data, login service 232a sends the session identifier for the new session and the prior 
session data to reinforce the end-of-session metering packets that were sent previously, but 
were not guaranteed to arrive. As noted earlier, in one embodiment metering packets are sent 
using UDP and even if sent, may not be delivered. 

[0038] Census service 232d also may authenticate metering packets to determine 
whether or not each packet is genuine. Authentication may be accomplished by hashing at least 
a portion of each packet and the session key, and sending the hash value with the packet. For 
example, the client first hashes the session key so that the client and the census service 23 2d 
each have the same hash of the session key. (Recall that census service 232d received a hash of 
session key along with the session identifier from login service 232a.) The client then hashes 
the metering information in a metering packet and the hash of the session key to produce the 
hash value that can be used by the census service 232d to authenticate the metering packet. 
Upon receipt, the census service 232d performs a similar hash and compares the results with 
the hash value sent with the packet. If the two hash values do not match, the packet is not 
genuine. In one embodiment, the well-known MD5 algorithm, with a basic key known only to 
the client 210 and login service 232a, is used to generate the hash value. However, the present 
invention is not limited to any particular hashing algorithm or authentication scheme. 

[0039] It should be noted that a hacker looking at metering packets would not be able 
to deduce much. First, even if all metering information is transmitted as cleartext, the hacker 
will not be able to associate a particular session identifier with a specific client. Furthermore, 
without the session key, the hacker will not be able to generate a correct hash value for altered 
or created metering packets. As a result, the metering packets and census service are not 
susceptible to a man-in-the-middle-attack. 
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[0040] Figure 3 is a block diagram showing the data structure of an exemplary 
metering packet 300 according to the present invention. The metering packet is 58 bytes long 
and includes a packet type element 310, a sequence number element 320, a time element that 
includes a charged time portion 330 and a free time portion 340, a session identifier 
element 350, and a packet authentication element 360. Note that the packet type element 310 
and sequence number element 320 are two bytes each, the change time portion 330 and free 
time portion 340 are four bytes each, the session identifier element 350 is 30 bytes, and the 
packet authentication element 360 is 16 bytes. Of course, the present invention is not 
necessarily limited to any particular metering packet size, content, or layout. 

[0041] It should be noted that the charge time portion 330 and the free time 
portion 340 offer significant flexibility in billing client 210. It may be desirable for proxy 
service 230 to provide some access to one or more services without charge. Tracking this level 
of detail in a substantially server-based implementation may impose a significant processing 
burden on a server and thereby erode much of the benefit provided by offering free time. 
Those of skill in the art will recognize that a free time portion may not be needed if only the 
amount of time to charge is of interest. For example, in some embodiments it may be desirable 
to track how much free time one or more client use, whereas in another embodiment, only the 
amount of time to charge is relevant. 

[0042] It also should be noted here, that the client tracks its own usage. In particular, 
the client determines what access falls within charge time portion 330 and what access falls 
within free time portion 340. In one embodiment, any access initiated automatically by the 
client, without user intervention, is accounted for in free time portion 340. For example, the 
client may initiate an automated download to receive a software update or other information. 
Nevertheless, the present invention is not necessarily limited to the use of any particular criteria 
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in determining which access should be accounted for in the charge time portion 330 and which 
access should be accounted for in the free time portion 340. 

[0043] The present invention also may be described in terms of methods comprising 
functional steps and/or non-functional acts. The following is a description of acts and steps that 
may be performed in practicing the present invention. Usually, functional steps describe the 
invention in terms of results that are accomplished, whereas non-functional acts describe more 
specific actions for achieving a particular result. Although the functional steps and 
non-functional acts may be described or claimed in a particular order, the present invention is 
not necessarily limited to any particular ordering or combination of the acts and/or steps. 

[0044] Figures 4A and 4B are flow diagrams, from the perspective of a server, 
describing various acts and steps for methods according to the present invention. The present 
invention may include an act of receiving (702) a login request from a client. A step for 
enabling (720) usage tracking may include an act of retrieving (722) an indicator from a 
configuration database indicating that usage should be tracked for all clients attempting to login 
and an act of retrieving (724) an indicator from a database of clients indicating that usage 
should be tracked for a particular client. An act of sending (732) one or more headers to a 
client may achieve the result of communicating (730) one or more usage tracking parameters to 
the client, including at least one of (i) an indication that the client should track usage, (ii) a 
unique session identifier, and (iii) a metering interval indicating how frequently the client 
should send metering packets. 

[0045] An act of receiving a session identifier (742) may achieve the result of 
identifying (740) one or more sessions through which a client accesses one or more services 
provided by one or more servers. A step for authenticating (750 and 770) may include acts of 
receiving (752) a session key associated with one or more sessions; an act of hashing (772) at 
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least a portion of each metering packet and the corresponding session key to generate an 
authentication element; and, an act of comparing (774) the generated authentication element 
with a packet authentication element included with each metering packet to determine whether 
or not each packet is genuine. 

[0046] As noted above, in one embodiment a census service receives the session 
identifier and a hash of the session key from a login service at about the same time that one or 
more headers are sent to a client. Although not shown, the present invention also may include 
an act of receiving metering packets that correspond to a previously terminated session. As 
described with respect to Figure 5, a client may store metering information from one session in 
non-volatile memory and send the stored metering information in a subsequent session. In one 
embodiment, the client sends the stored metering information to the login service and the login 
service forwards the stored metering information to the census service. Among other things, 
this allows the census service to accept the metering information without independently 
authenticating it. As a result, it is not necessary for the census service to maintain session 
identifiers and session keys indefinitely. 

[0047] A step for monitoring (760) one or more metering packets may be 
accomplished by an act of receiving (762) one or more metering packets from a client, wherein 
each of the one or more metering packets includes a time element indicating the client's usage 
of the one or more services.- A step- for discarding (780) one or more redundant metering 
packets may include an act of, prior to updating a usage database, searching (782) a cache of at 
least one received metering packet; an act of, if a copy of a particular metering packet is found 
in the cache, identifying ("yes" branch of 784) the particular metering packet as redundant and 
not updating the usage database based on the particular metering packet or in other words 
ignoring (788) the particular metering packet; and, an act of, if a copy of the particular metering 
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packet is not found in the cache ("no" branch of 784), adding (786) the particular metering 
packet to the cache. A step for tracking (790) a client's usage of one or more services may be 
achieved by an act of updating (798) a usage database based on one or more metering packets. 

[0048] Figure 5 is a flow diagram, from the perspective of a client, describing various 
acts of methods according to the present invention. The present invention may include an act 
of sending (512) a login request to a login service; an act of receiving (516) one or more 
headers from the login service including at least one of (i) an indication that a client should 
track usage of one or more services provided by one or more servers, (ii) a unique session 
identifier, and (iii) a metering interval indicating how frequently the client should send 
metering packets; an act of receiving (524) a session key associated with the one or more 
sessions (whether received in a header or in some other way); an act of accessing (528), 
through the one or more sessions created in response to the login request, at least one of the one 
or more services provided by the one or more servers; and, generating (532) one or more 
metering packets, wherein each of the one or more metering packets includes a time element 
indicating the client's usage of the one or more services. 

[0049] The present invention also may include an act of hashing (536) at least a 
portion of each metering packet to generate an authentication element; an act of storing (544) 
each authentication element in the corresponding metering packet; an act of sending (548) the 
one or more metering packets (possibly redundant) to a census service; an act of storing (556) 
metering information in non-volatile memory; and, an act of sending (564) the stored metering 
information to the census service in a subsequent session. 

[0050] The present invention may be embodied in other specific forms without 
departing from its spirit or essential characteristics. The described embodiments are to be 
considered in all respects only as illustrative and not restrictive. The scope of the invention is, 
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therefore, indicated by the appended claims rather than by the foregoing description. All 
changes which come within the meaning and range of equivalency of the claims are to be 
embraced within their scope. 
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